35326ba5ccfec38bf7b63e7212f11455fedd98c57db8e5fa4f2ef7402260de9e

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 00:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
admin/lang/en_US/index.html
Size 27B
Sample260930-amk8basfmc
SHA256 35326ba5ccfec38bf7b63e7212f11455fedd98c57db8e5fa4f2ef7402260de9e
MD5 9e8a4b5fb8989227e124331d0a824fbf
SHA1 b488d1281c16c2753e2b4acb41f05e58e407c7fd
SHA512 2198ed248d9e5cee6d24048a8be481f0bb00fbe6275df1521e81f6d4d9a1388ea21ba1dafbbd630488b55a032eb0f321040319a4b6ebe50cab846c1d83b5ce8a
MD5 SHA1 SHA512

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2192	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{C78721A5-2FEF-4931-ADC5-3305711F4342}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1760	msedge.exe
1760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe
2056	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2056 wrote to memory of 1568	2056	msedge.exe	89
PID 2056 wrote to memory of 2192	2056	msedge.exe	91
PID 2056 wrote to memory of 5088	2056	msedge.exe	92
PID 2056 wrote to memory of 5088	2056	msedge.exe	92
PID 2056 wrote to memory of 5088	2056	msedge.exe	92
PID 2056 wrote to memory of 4972	2056	msedge.exe	93
PID 2056 wrote to memory of 4972	2056	msedge.exe	93
PID 2056 wrote to memory of 440	2056	msedge.exe	94
PID 2056 wrote to memory of 440	2056	msedge.exe	94
PID 2056 wrote to memory of 3944	2056	msedge.exe	95
PID 2056 wrote to memory of 440	2056	msedge.exe	94
PID 2056 wrote to memory of 3944	2056	msedge.exe	95
PID 2056 wrote to memory of 3944	2056	msedge.exe	95
PID 2056 wrote to memory of 3992	2056	msedge.exe	96
PID 2056 wrote to memory of 3832	2056	msedge.exe	97
PID 2056 wrote to memory of 3992	2056	msedge.exe	96
PID 2056 wrote to memory of 3992	2056	msedge.exe	96
PID 2056 wrote to memory of 3832	2056	msedge.exe	97
PID 2056 wrote to memory of 3832	2056	msedge.exe	97
PID 2056 wrote to memory of 1156	2056	msedge.exe	102
PID 2056 wrote to memory of 2992	2056	msedge.exe	103
PID 2056 wrote to memory of 1156	2056	msedge.exe	102
PID 2056 wrote to memory of 2992	2056	msedge.exe	103
PID 2056 wrote to memory of 4216	2056	msedge.exe	106
PID 2056 wrote to memory of 1040	2056	msedge.exe	112
PID 2056 wrote to memory of 1264	2056	msedge.exe	113
PID 2056 wrote to memory of 432	2056	msedge.exe	114
PID 2056 wrote to memory of 208	2056	msedge.exe	116
PID 2056 wrote to memory of 208	2056	msedge.exe	116
PID 2056 wrote to memory of 1156	2056	msedge.exe	124
PID 2056 wrote to memory of 1156	2056	msedge.exe	124
PID 2056 wrote to memory of 464	2056	msedge.exe	125
PID 2056 wrote to memory of 464	2056	msedge.exe	125
PID 2056 wrote to memory of 1760	2056	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\admin\lang\en_US\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffff678c188,0x7ffff678c194,0x7ffff678c1a0
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,16961536186006526878,12073901179642736854,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,12452668167232030728,14566395781157916289,262144 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:2
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2200,i,12194846215237677586,2866695398471011661,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,16452087625503834242,3200558159391733317,2097152 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,240310735642523674,2169814792658658725,2097152 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,11002464898135004074,12921182275517856758,2097152 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,17012638635647776977,17460853568330368818,2097152 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:2
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,4522692350181010759,15283045993294336574,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,6507824113275718797,12551110254597549006,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7544513493712536,14896263019894895447,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7544513493712536,14896263019894895447,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,4277593769298354514,7933930670107880119,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,324522914372395792,14967139153059867888,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,9662603323942919967,9858471559955315041,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,995010783267734254,432647338819910077,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,16877944403157004232,641869969787579357,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,1493594732521813056,12920070657914421825,524288 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,14890036342445964027,15612319270762220294,262144 --field-trial-handle=2864,i,10760399230225790843,2028407449905115280,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

945046ed-8720-4247-8f3e-2a75ddef9ee3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\945046ed-8720-4247-8f3e-2a75ddef9ee3.tmp
Size 18KB
SHA256 fc0502f464748922b7a8623a25cff4ae80a02f7a2de067c03bcd8659da8e1372
MD5 087134a14f45266d8955cad0eab3984d
SHA1 c88517f53fed509fbcf3a1eef54a86aa543393e4
SHA512 144c3b7278ad451a522587830c6b60b1d65cbb70c9c767eb031915be4ef22c8c531e717944cf23fe1d1f3e9c56cd2094e928ad586664fb19c8402b8c6920e50e
SSDEEP 384:GZcIhsNpEIqmLb/3yduh//ySCs5VZh6DKhHtoy:Uh/fmXyE/+s5fYGHt5
TLSH
T1D1829D326C78BCBB5DF7A595F44336139EB880A3A7C85F8481DDBB2D01DA4A81307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 cd080462fef4f3cae717637c79453570548daaa6701714a200c3401467679ded
MD5 8564a1822fb82f4760489d8c8fa97a31
SHA1 dae47cff350029df69d022a40c3b0b2ee20b3e27
SHA512 a43aafa53a8768fea9bfdb929112a2bbbfecbeecc6f420cdd7ee1d4e999221c47c25f0fc0f57d4b1842d2a987048f1b0e71301041a668bbfe5beaed25e994ad8
TLSH
T19BE02098C9C7C23DD201748F41686B4CC1803B0BA6CC6E476F05A8897401050E6E99F0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1aa0f898cc29a3a6fd7986a3be087b572759413a2192142776b7e93c18c101cd
MD5 fc46d0c630e76b49158dceed9e35b5f5
SHA1 534c5a64a287d35b5e62369a2ecc9992b38f506a
SHA512 c663297a235e1946288ce5bde3bab968e1c35fe533666bb5952bee541cf48ebab84f7e690128528dacb7b2e456f5d149a630ca14e341fb0f57891f6807f8c027
TLSH
T18D517E9C17E066E1F7A9DF34A2F3158FB8F0C0C1518B1EDE50E8DA7AA866F065074C18
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 fc45645ee0aeea239008c6aa10d535134e2a93d4842f7ca398c062ba3610f008
MD5 cb93e93872f4efab717fe00fd9e2d272
SHA1 d05c1f37b6cbe8c551a933f25e4546d3c4648eb5
SHA512 3b548dd247beaa69d4f520ead82d081a698c9a09afeb7911e6e5248950d64820e21ce466bdb9353928db1ede99e21ed540b985cd1e1fa6b56e87631f4edf2294
TLSH
T13B11BDB3C3D595AE8A0116F06A24AE1BCE2D0605421C7D19C9D4EF2797E3075E00199B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 2e7be992128af875cd4f0a18ce01ec23b863ccd1fb524b9d36cd73a8aa26d57a
MD5 1ada232efa9818087ad45e2f3bf7e103
SHA1 4f59dc6f296afc7386d24b3025cf371b93dd06af
SHA512 20c3d4630c7d04a31d2349b585d6d0e3973d71d89718c9631d1e6d16372b62eaa0e2b6b8b9b9fd01d21aa991ed07f382dddc3ce8bd90712ba08566de9358f36f
SSDEEP 192:sxZfRnWI/flszRmIdpdYHW6+WNGY36aQrIgrJ:sxZf4I/flszRHSHbGX79
TLSH
T14E22B8516E78B97B8CCBD209BB257F53E6F9503251D41E48EAFC861C05E66CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d0b8af640281fda2bb59350f60fcb21d3b792f29d16a3f2d5e6ee0c1599030cc
MD5 f6cd6e4635536f07c6116392fdef77bc
SHA1 69aa0494b213ebc976fa26659d66ba53aedd06cc
SHA512 261af365822963667a4a59824115c5f90ae7347d22465ad6d4b9271d9057e157d449aba017d92a6b11bd0ef417d94b9e778be1c1b88324d919632918d4b67469
SSDEEP 192:sxZfRnWI/fls3RmIdpdYHW6+WNGY36mQrIg5lJ:sxZf4I/fls3RHSHbGXfp
TLSH
T19222A8516E78B97B8CCBE209BB257F53E6F9503251951E48A6FCC62C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1da57a56773bc93e833389497bca16fa69605256f0b324d6bca2bf369bc831f4
MD5 0979970156850ae7422df8f66090eb1a
SHA1 7a8671b94b60624aa23e5a1fa348b0797b029e20
SHA512 6b49981a90338864559a72d1604c3fcf4b10a90f6732c3756f3efcd5d096b7e6e646678bb6dfd824945ced58b2cd34aebe8818eb4ed014493197c9bdd20fd062
SSDEEP 192:sxZfRnWI/fls3RmIdpHYHW6+WNGY369QrIg5lJ:sxZf4I/fls3RH4HbGXgp
TLSH
T1AA22B8526E78B97B8CCBE21DBB257F53E6F9503251941E48A6FCC61C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 85fc3b81eaf2997f94f88fb3733a65154e79800d58b12cabda675e281ed93018
MD5 6db7ddf243fa35687417196c1e5ddfa1
SHA1 5197d89389948b5b9d35ed5de80bcba202b097a1
SHA512 1dc7dcdca0ed113c2237709765eb0e1b54aac8c72199d98e57293b068d7995f394ba2cb2ab4329df164ee211b16167eaedf4a0e3b538baef9515d45637f37738
SSDEEP 192:sxZfRnWI/flsjRmIdpdYHW6+WNGY36aQrIg5XJ:sxZf4I/flsjRHSHbGX73
TLSH
T1CC22A7526E78B97B8CCBD209BB25BF53E6F9503251D41E58EAFC861C05E66CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 354414506b0b205e4a343c55b5826bbd03375147045e55c657156f9ea129dc1e
MD5 61eb2c3a9536e19eb473941f9fd9d1da
SHA1 01d537fc7dde1b13411f9dd37bf1a67760f42dc5
SHA512 74f3708fe8d1d4d6a72d1fe5a21c94d97226bd8a77defc5a714bfcda005766b5cee4f47105545a6faa5be4dd645684bcdea844cc5822bc95a8ac6c7a92414141
SSDEEP 768:2AKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/lro29:2AKlm7QWvUYe0u1ja8/L/E/e29
TLSH
T1FAC2FA3B740CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c8ffd43cab0743dec51a2badb7255442e285974dc7297ecaff8c2ce0952d1a94
MD5 ca6e235c73a7df10fe0a88cf983efb94
SHA1 495d41abc8b1d49280189a56b2119e64fa75f10f
SHA512 d37ed76399328bf9d0764211547e0e7c56e38f7c4c934c3e78936c959a70c7f1db7474799b8908fe50ea3e91dec8279b1dfcfe0e2c95942308f2f3fcce48b3bc
SSDEEP 48:K0KV4kKIYJbUzEIScJK9A16JxyZYLs46yLMb6G02aDbqpyIS+DK9a14Dx8TYRiKq:Kg1eKeAiOD+KsArekKr6OL
TLSH
T13B91960431BB125438BD68A89074875E964176733448EE6FBFBD40A58F6BE048EFE4ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

92315609-8e06-4e6f-acfb-04b3d6719bbf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\92315609-8e06-4e6f-acfb-04b3d6719bbf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 0279e30864195b0aa7b59bd72e5dfc3d9dc10df691e4b25ab653c2bf5de91aca
MD5 e4bb9382a375a2c5c2ad3da9137af061
SHA1 fc7d9723754000c0fc31d17406d329c3875aa517
SHA512 43901ac75f9028ce869c2b83fa4aebfc0f78cecb4de034dc416557cc1e383e8ee79c777be3a799b92dff1b915e97c586115bc8ee38c885f685fa98b444dc13eb
SSDEEP 384:oiFiZcIjzsNL8TUNTUlIlEIqmLb/3yduh//ySCC5VZh6DKhHtoy:zFQn6wgGfmXyE/+C5fYGHt5
TLSH
T1D1A28D339CA8E8BBADF79A85F5473613DEB440A3D6C4AE94D2C9AB1D01DB0981307D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 96ecee88b252455cda0f2a36ed33cce451386e9d506b78ac514134f7c9db0182
MD5 c8217dbf1c911817a95e1c82b8018a33
SHA1 c14c06d2561f0fb128ca483d0e70a1e1d2e4126b
SHA512 8f195da0e535da0af43c5cd4b52a702c3852c5fa35629a067ba9f6477840a52c386b99a35400c6c5ad03fe5c2458a6a846db0ecaeb9efc6cfb1a5265d8888d95
SSDEEP 192:BON86JUrQmiUy39RBo//WywSC1NxxqIU6:BON86+dYBo//ySCd5U6
TLSH
T14312F735B868EC7B5DE3A594F08336239E644067EB896F94D6DD2F2C02DB16C5307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 07cb89ba0a919d008f32a93e0641f5b25861224373fc2c0652ef40f356541bc6
MD5 51c572faf657e78da71e8a0f65b3ad46
SHA1 06ff14b19b44f4672de07b1760d1f953cbd20b2a
SHA512 6a202fca13874fea39b09c7dfa3798be953363835adf92b5dc8319d5ac79f884659ee4f3532839177f375db50bbedcc2240b1e17efa4065a0c0b72eb46ca3491
SSDEEP 384:YZcIhsNp9IqmLb/3yduh//ySCs5VZh6DKhHtoy:mhofmXyE/+s5fYGHt5
TLSH
T1B7829D326C78BCBB5DF6A595F44336139E7880A3A7C85F84C5DDBB1D01DA4A81307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5847cdfcd1505a01f40225b1a70cce4f2a35107d29e64ae5c97426e336ae5148
MD5 ffcc9cdc029d236d30969a7e85a94687
SHA1 756edb27f9713597273b6fa407f9f21998852183
SHA512 6f4b4f7e7a1d7f6070ace072934601aee0efa5e5f218e8590f58aa1157e8c0303ac2a34830eb18f66d922eaf9b284d423c86a395025bccdaa749891e18b5c71f
SSDEEP 96:KqONkYQsjpfbUmjH5ih/cIPURHl8h4otop5uaD9XBKP4v+Y1xf//ojdixSYiywg3:BONs6JUm0QmiUyj9Rso//WywABC1eU6
TLSH
T12902C738BC68B8BB8EF3AD45F4877B239FA4106BA6951F84DAD81E2D01D755C1302C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dac2f957-3c26-4d97-97d1-0a0ab8af21b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\dac2f957-3c26-4d97-97d1-0a0ab8af21b1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c1d897a1558ac13fbb4a53764ebe2c85457e1ca1daeb2de0dc77de288a9e2222
MD5 fb7d7dfca537fb81ba92add577fbace7
SHA1 7338226e2f15b9ab8df1cb41ab47e9d577495cca
SHA512 93323b6feb95e800372d6d2e6cffb2e71afa56c61d033f5bca2e760b80e532dc2bdbc691821e602ab50acd9716ee0993c9c81364a420b478a16ba909602e6fd3
TLSH
T14A415A5CBAE91148B3B76F5AABF6A86D487BB9772E0AD45D00010D4F0A22A40CD62737
MD5 SHA1 SHA512 TLSH

Submit Download